|
||||||||
Hello. I finally bought myself a WRAP board and installed m0n0wall today! First, a question regarding VLAN: I can't seem to find much docs on VLAN on m0n0's website. I come from a Netscreen environment where the term VLAN and zone was used almost interchangeably(at least with our setup.) And we created firewall rules based on cross-zone/vlan traffic. Well, it seems that m0n0wall doesn't use the term VLAN the same way, as firewall rules and such are based on LAN/WAN/OPT1 objects. Can someone explain to me how VLANS are used on m0n0wall or point me in the right direction? And a wishlist: like I said, I've been exposed to Netscreen way of doing things. One thing I find myself missing with m0n0wall is the ability to add custom services and custom service groups. I saw that group alias for IP addresses is already on the todo list, but I don't see any services alias feature in the todo list on the website. It would be nice to be able to add your own list of services/protocols to the list. Netscreen's OS comes with a huge list of protocols and still let you add your own. Keeps me from looking at the rules a year from now and wonder what that port was for. Ability to group protocols/services into an alias: now that's something I found *really* useful working with Netscreens. Instead of allowing all outbound traffic by default, I only allow explicit set of traffic. I create an alias of allowed services and create a single rule to allow it. (or block known bad ports explicitely and log it.) Then, if I want to allow more services, or drop a service, I simply edit the alias and it's taken care of. It might not be that big of a deal when you're only dealing with LAN/WAN but I sure found it useful working on our Netscreen 208 with 7 separate networks. But overall, m0n0 has hacked Linksys WRT54G firmwares beat in speed and ease of use(I bought the WRT54G few weeks ago to replace my linux firewall, but found a lot of them to be sluggish and OpenWRT to be too time-consuming, so I'm putting in m0n0wall and will be using WRT54G strictly as an access point.) So I'd like to say thanks. John |